Privacy Policy

What Sidedoor collects, why it collects it, who it is shared with, and how to get it deleted.

LAST UPDATED 12 SEPTEMBER 2026

What we collect

Sidedoor only works if it knows who you are and what you want applied to, so the data we hold is the data the product runs on:

Account data — name, email address, password hash, and the plan you are on.
Your resume and profile — the file you upload, plus everything we parse out of it: work history, education, skills, location, notice period and visa status.
Search settings — target cities, roles, seniority, salary expectations and any company you have excluded.
Sending data — the applications and emails we generate on your behalf, where they were sent, when, and what came back (opens, replies, bounces).
Billing data — handled by our payment processor. We store the plan, the status and the last four digits of a card; we never see or store the full number.
Product telemetry — pages viewed, features used, errors hit, plus IP address and user agent.

Why we use it

To write and send applications and outreach emails on your behalf — the core of the service.
To match you against roles, which means reading job posts and comparing them to your profile.
To bill you, support you, and tell you about things that happened in your account.
To keep the system working and honest: rate limits, abuse prevention, deliverability monitoring and debugging.

We do not sell your data. We do not use your resume to train models for other customers, and we do not share it with recruiters except as part of an application you asked us to send.

Who we share it with

Sub-processors, each doing one job and bound by contract to that job: cloud hosting, email delivery, model providers used to draft your applications, our payment processor, and error and product analytics. We will name the current list on request.

Anything else requires a legal obligation — a valid court order or the equivalent — or your explicit instruction.

Where applications go

When Sidedoor applies for a role, the employer receives your resume, your cover letter and the details that application form asked for. That data is then in the employer's hands and governed by the employer's privacy policy, not ours. We cannot retrieve or delete it for you.

How long we keep it

While your account is open: everything above, so your history and pipeline stay intact.
After you delete your account: resume, profile and search settings are erased within 30 days.
Sending logs and billing records are kept for up to 7 years where tax and anti-abuse law requires it, reduced to what that requires.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, export it, or delete it — and you can withdraw consent for optional processing at any time. Write to us and we will action it within 30 days.

If you are in the EU or UK, the GDPR applies and our lawful bases are contract (running the service), legitimate interests (security, deliverability, product analytics) and consent (marketing email). If you are in California, the CCPA applies and we do not sell or share personal information as those terms are defined there.

Security

Data is encrypted in transit and at rest, access is limited to the engineers who need it, and every access is logged. See the Security page for the details.

Contact

Privacy questions and requests: support@usesidedoor.com.